Use this procedure to manually grant Full Disk Access to macOS sensors.

Procedure

  1. In System Preferences, open the Security & Privacy pane and scroll down to Full Disk Access. Click the Lock icon to edit the settings.
  2. In the Full Disk Access window, locate com.vmware.carbonblack.cloud.se-agent.extension.systemextension and select its checkbox.
    Full Disk Access checkbox screenshot
  3. Open a Finder window and go to /Applications/VMware Carbon Black Cloud/.
  4. Drag only the following folder items into the Full Disk Access list:
    • LiveQuery bundle
    • repmgr bundle
    • uninstall bundle
    • VMware CBCloud

      Folders in the Full Disk Access List

    Important: An Apple-acknowledged bug in the Full Disk Access pane prevents bundles from displaying in the window. It will appear as if the drag was not successful. This is not the case.
  5. Verify that Full Disk Access is successfully enabled. It takes approximately one hour for RepCLI to successfully report Full Disk Access changes. To verify the change immediately, restart the endpoint.
  6. Open a Terminal window and run one of the following commands (requires admin password):
    cd /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/
    sudo ./repcli status
    or
    sudo /Applications/VMware\ Carbon\ Black\ Cloud/repcli.bundle/Contents/MacOS/repcli status
    RepCLI displays a sensor information report, including Full Disk Access status:
    RepCLI status output example